Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/64f6f53e-db79-389d-a392-5b36d4c98bfa.roa
File:                     64f6f53e-db79-389d-a392-5b36d4c98bfa.roa (raw, json)
Hash identifier:          d08tnA9qY8GgOMvVY6TwuiMH8ZBzdHpOLhRRFh2qy7g=
Subject key identifier:   FF:9E:A9:6D:F6:54:61:D9:D3:40:97:E2:E1:20:5F:95:D3:B5:12:BD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584DB34030787EE29726D7A98800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/64f6f53e-db79-389d-a392-5b36d4c98bfa.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     394973
IP address blocks:        209.249.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:30:78:7e:e2:97:26:d7:a9:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=4372e470-9a8d-4169-8be9-92436427f2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:05:cb:dd:b0:41:3a:05:56:3e:1d:8e:dd:
                    25:b1:50:ce:c9:1f:47:7d:2b:e1:ac:96:d5:4e:da:
                    cb:88:74:68:60:e1:39:6e:0c:8a:dd:53:c2:9a:56:
                    17:26:8a:d1:a4:3b:a8:17:74:0b:e1:c7:bb:5a:82:
                    10:74:91:3a:1d:22:b5:31:6b:d2:48:08:13:24:bb:
                    04:62:43:85:3f:78:d6:a6:27:f8:eb:a5:a9:35:51:
                    a0:10:89:2d:95:34:6e:bd:77:80:ef:d2:03:46:28:
                    ec:2e:16:71:09:75:9c:be:0f:25:5d:ce:b5:e0:f7:
                    09:e0:bc:fc:65:f0:20:8b:1e:46:7d:4b:49:a0:d0:
                    c0:5e:e7:33:e3:f5:0f:e7:3c:05:a0:61:f7:c4:e7:
                    fd:be:c7:fb:c7:9f:de:5b:24:5f:24:bc:8d:b4:58:
                    2a:07:0e:81:a1:0b:3b:18:27:bc:35:6c:0b:29:69:
                    dc:b6:5a:5c:ff:d5:cf:39:39:54:fa:01:a3:8a:fa:
                    04:fd:90:3d:9e:a5:60:64:32:b6:9b:bb:96:64:a8:
                    b1:6a:93:5e:a7:92:73:9f:10:21:18:cb:7f:48:c0:
                    ef:37:c6:9a:35:dd:ef:1f:68:f7:41:d8:58:74:44:
                    3f:71:e5:53:46:33:14:b2:7a:ef:1d:f4:0c:1c:65:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:A9:6D:F6:54:61:D9:D3:40:97:E2:E1:20:5F:95:D3:B5:12:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/64f6f53e-db79-389d-a392-5b36d4c98bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:ba:1f:02:d9:b9:39:06:9e:92:c6:b6:5f:4a:70:6d:bc:
         e7:ec:fc:c6:c4:21:3d:ce:80:6d:78:c2:bc:d2:a1:ac:b9:b2:
         8e:6a:38:c7:f8:5b:0f:64:0b:49:5a:f0:d8:c7:d5:91:72:d7:
         13:6f:09:94:86:34:5a:5d:ba:b0:7a:16:28:76:17:ed:68:ba:
         31:bf:df:7f:58:a9:75:67:35:e0:13:94:f1:4c:6a:72:bf:7c:
         1a:f4:dd:31:d0:b3:72:c8:cb:e3:42:44:e4:06:b9:4f:f4:6e:
         30:17:a0:20:4b:97:5d:78:cb:08:3a:48:a9:4d:fd:fd:19:74:
         0f:af:bd:54:6f:ec:cd:9f:b0:de:d1:cb:e8:70:36:60:7b:c3:
         68:be:05:d5:ec:0a:a5:07:cf:ad:cc:c6:83:fe:05:0e:14:5e:
         6e:8d:e1:a3:8a:10:bd:a2:fb:b6:de:fc:82:19:63:84:23:e4:
         80:40:ff:33:62:8e:e4:ac:d4:8e:cd:11:8e:cc:a9:3c:87:27:
         64:cd:72:7f:6e:bc:15:10:58:5e:ce:39:da:a5:6b:08:a3:57:
         14:c6:95:48:22:a1:1c:ee:ea:43:b3:40:e7:03:d1:d5:cf:5a:
         f9:92:28:03:b0:17:83:8b:91:ef:ff:3f:69:36:ea:04:f2:48:
         e4:96:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 17:50:26 2026 by rpki-client